@stll/anonymize-wasm 2.0.0 → 2.0.2

package/dist/wasm.d.mts

@@ -1,5 +1,5 @@
-import { a as OPERATOR_TYPES, i as DetectionSource, n as DETECTION_SOURCES, o as OperatorType, r as DETECTOR_PRIORITY, t as DEFAULT_ENTITY_LABELS } from "./constants2.mjs";
-
+import { a as DetectionSource, c as ENTITY_SELECTIONS, d as EntitySelection, f as OPERATOR_TYPES, i as DefaultEntityLabel, l as EntityCapability, n as DETECTION_SOURCES, o as ENTITY_CAPABILITIES, p as OperatorType, r as DETECTOR_PRIORITY, s as ENTITY_LABELS, t as DEFAULT_ENTITY_LABELS, u as EntityLabel } from "./constants2.mjs";
+import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES, CapabilityManifest, CapabilityRuntime } from "./capabilities.mjs";
 //#region src/native-search-config.d.ts
 /**
  * Structural type for the prepared static-search config the native binding
@@ -344,7 +344,8 @@ type DetectedEntity = EntityBase & {
  * write — or that a later pass could clear.
  */
 type CorefAliasEntity = EntityBase & {
-  source: typeof DETECTION_SOURCES.COREFERENCE; /** Full text of the source entity this alias refers to. */
+  source: typeof DETECTION_SOURCES.COREFERENCE;
+  /** Full text of the source entity this alias refers to. */
   corefSourceText: string;
 };
 /**
@@ -361,13 +362,36 @@ type ReviewedEntity = Entity & {
   decision?: ReviewDecision;
   originalLabel?: string;
 };
+/**
+ * A single entry in the workspace-scoped gazetteer
+ * (deny list). Persisted in IndexedDB.
+ */
+type GazetteerEntry = {
+  id: string;
+  canonical: string;
+  label: string;
+  variants: string[];
+  workspaceId: string;
+  createdAt: number;
+  source: "manual" | "confirmed-from-model";
+};
 /** Per-label operator selection. Key is the entity label. */
+type MaskDirection = "start" | "end";
+type MaskOperatorConfig = {
+  type: "mask";
+  maskingCharacter: string;
+  charactersToMask: number;
+  direction: MaskDirection;
+};
+type OperatorSelection = Exclude<OperatorType, "mask"> | MaskOperatorConfig;
 type OperatorConfig = {
-  /** Operator per label. Missing labels default to "replace". */operators: Record<string, OperatorType>; /** Custom replacement string for the redact operator. */
+  /** Operator per label. Missing labels default to "replace". */
+  operators: Record<string, OperatorSelection>;
+  /** Custom replacement string for the redact operator. */
   redactString: string;
 };
 /** Whether an operator produces a reversible redaction entry. */
-type OperatorReversibility = "reversible" | "irreversible";
+type OperatorReversibility = "reversible" | "irreversible" | "preserving";
 type AnonymisationOperator = {
   type: OperatorType;
   reversibility: OperatorReversibility;
@@ -375,7 +399,7 @@ type AnonymisationOperator = {
    * Apply the operator to a single entity occurrence.
    * Returns the replacement string to embed in the document.
    */
-  apply: (text: string, label: string, placeholder: string, redactString: string) => string;
+  apply: (text: string, label: string, placeholder: string, redactString: string, selection: OperatorSelection) => string;
 };
 /**
  * Redacted document output with stable entity mapping.
@@ -384,18 +408,221 @@ type RedactionResult = {
   redactedText: string;
   /**
    * Maps placeholder to original text. Only populated for
-   * reversible operators (replace). Empty for redact.
+   * reversible operators (replace). Empty for redact, keep, and mask.
    */
-  redactionMap: Map<string, string>; /** Maps placeholder to the operator that produced it. */
+  redactionMap: Map<string, string>;
+  /** Maps placeholder to the operator that produced it. */
   operatorMap: Map<string, OperatorType>;
   entityCount: number;
 };
+/**
+ * Configuration for the detection pipeline.
+ */
+type DenyListCategory = "Names" | "Places" | "Addresses" | "Courts" | "Financial" | "Government" | "Healthcare" | "Education" | "Political" | "Organizations" | "International";
+/**
+ * Metadata for a single dictionary entry in the
+ * deny-list system. Mirrors the shape from
+ * the anonymize-data package so consumers can pass
+ * pre-loaded data without a runtime dependency.
+ */
+type DictionaryMeta = {
+  label: string;
+  category: DenyListCategory;
+  country: string | null;
+};
+/**
+ * Caller-supplied exact terms for deny-list matching.
+ * These entries are merged with the published deny-list
+ * dictionaries when `enableDenyList` is enabled.
+ */
+type CustomDenyListEntry = {
+  value: string;
+  label: string;
+  variants?: readonly string[];
+};
+/**
+ * Caller-supplied regex detector. The pattern is passed
+ * to the underlying text-search regex engine, so use its
+ * supported regex syntax. Inline flags such as `(?i)` are
+ * accepted when supported by that engine.
+ */
+type CustomRegexPattern = {
+  pattern: string;
+  label: string;
+  score?: number;
+  preparedArtifactPolicy?: "include" | "omit";
+};
+/**
+ * Pre-loaded dictionary data for dependency injection.
+ * Consumers that want name/city/deny-list detection
+ * load dictionaries themselves (e.g. from the
+ * anonymize-data package) and pass them here; the
+ * anonymize package has zero cross-package imports.
+ *
+ * All fields are optional. When a field is absent,
+ * the corresponding detection path is skipped (same
+ * behavior as when no dictionaries are available).
+ */
+type Dictionaries = {
+  /**
+   * First names per language code (e.g., "cs", "de").
+   * Merged with legacy config names at init time.
+   */
+  firstNames?: Readonly<Record<string, readonly string[]>>;
+  /**
+   * Surnames per language code.
+   * Merged with legacy config names at init time.
+   */
+  surnames?: Readonly<Record<string, readonly string[]>>;
+  /**
+   * Non-Western name tokens per locale code
+   * (e.g., "in", "ar", "ja-latn", "ko", "zh-latn",
+   * "th", "vi", "fil", "id"). Merged with bundled
+   * names-nw-*.json data at init time.
+   */
+  nonWesternNames?: Readonly<Record<string, readonly string[]>>;
+  /**
+   * Pre-loaded deny-list dictionaries keyed by
+   * dictionary ID (e.g., "courts/CZ", "banks/DE").
+   * Each value is the array of terms for that
+   * dictionary.
+   */
+  denyList?: Readonly<Record<string, readonly string[]>>;
+  /**
+   * Metadata per dictionary ID. Required when
+   * `denyList` is provided so the pipeline knows
+   * labels, categories, and country filters.
+   */
+  denyListMeta?: Readonly<Record<string, DictionaryMeta>>;
+  /**
+   * Pre-loaded city names, already merged across
+   * all desired countries.
+   *
+   * Prefer `citiesByCountry` when callers also pass
+   * `denyListCountries` / `denyListRegions`; merged
+   * city arrays cannot be scoped after injection.
+   */
+  cities?: readonly string[];
+  /**
+   * Pre-loaded city names keyed by ISO 3166-1 alpha-2
+   * country code. When provided, the deny-list builder
+   * applies `denyListCountries` / `denyListRegions`
+   * before adding city patterns to the search automaton.
+   */
+  citiesByCountry?: Readonly<Record<string, readonly string[]>>;
+};
+type PipelineConfig = {
+  threshold: number;
+  enableTriggerPhrases: boolean;
+  enableRegex: boolean;
+  /**
+   * Expected content language codes. When present, these
+   * derive default dictionary scopes for name corpus and
+   * deny-list matching unless the lower-level scope fields
+   * below are set explicitly.
+   */
+  languages?: string[];
+  /**
+   * Convenience form for single-language documents. Ignored
+   * when `languages` is also provided.
+   */
+  language?: string;
+  /**
+   * Enables legal-form organization detection.
+   * Required for typed callers; legacy untyped
+   * callers that omit this field are treated as
+   * enabled at runtime for backward compatibility.
+   */
+  enableLegalForms: boolean;
+  /**
+   * Enables first-name/surname/title corpus matching.
+   * When deny-list mode is enabled, this also controls
+   * whether name-corpus entries are injected into the
+   * deny-list search automaton.
+   */
+  enableNameCorpus: boolean;
+  /**
+   * Optional language scope for first-name/surname
+   * dictionaries, using the keys present in
+   * `dictionaries.firstNames` / `dictionaries.surnames`
+   * (for example `["en", "de"]`). When omitted, all
+   * injected name languages are used for backward
+   * compatibility.
+   */
+  nameCorpusLanguages?: string[];
+  enableDenyList: boolean;
+  denyListCountries?: string[];
+  denyListRegions?: string[];
+  denyListExcludeCategories?: string[];
+  /**
+   * Caller-owned exact terms to match through the
+   * deny-list layer. Requires `enableDenyList: true`.
+   */
+  customDenyList?: readonly CustomDenyListEntry[];
+  /**
+   * Caller-owned regex detectors. Requires
+   * `enableRegex: true`.
+   */
+  customRegexes?: readonly CustomRegexPattern[];
+  enableGazetteer: boolean;
+  /**
+   * Detect country names (ISO 3166-1 names, curated
+   * aliases, alpha-3 codes). Defaults to true. Names
+   * span all manifest languages plus widely-used
+   * additions (Dutch, Russian, Chinese, Arabic, etc.).
+   */
+  enableCountries?: boolean;
+  /**
+   * Reserved for compatibility with the removed TypeScript pipeline.
+   * The native pipeline rejects `true`; supply deterministic custom rules today
+   * and use the future caller-detection API for model-produced spans.
+   *
+   * @deprecated Native NER is not implemented.
+   */
+  enableNer?: boolean;
+  enableConfidenceBoost: boolean;
+  enableCoreference: boolean;
+  enableZoneClassification?: boolean;
+  enableHotwordRules?: boolean;
+  /**
+   * Requested output labels. An empty array means
+   * "do not filter by label" for deterministic detectors.
+   */
+  labels: string[];
+  workspaceId: string;
+  /**
+   * Pre-loaded dictionary data for name, deny-list,
+   * and city detection. When omitted, dictionary-based
+   * detection paths are skipped. Consumers load from
+   * the anonymize-data package and pass the data here.
+   */
+  dictionaries?: Dictionaries;
+};
 //#endregion
 //#region src/native.d.ts
 type NativeBindingOperatorConfig = {
-  operators?: Record<string, OperatorType>;
+  operators?: Record<string, OperatorSelection>;
   redactString?: string;
 };
+type NativeBindingCallerRedactionOptions = {
+  requestJson: string;
+  operators?: NativeBindingOperatorConfig;
+};
+type NativeBindingSessionCallerRedactionInput = {
+  fullText: string;
+  requestJson: string;
+};
+type NativeBindingSessionCallerRedactionPlanOptions = {
+  inputs: NativeBindingSessionCallerRedactionInput[];
+  operators?: NativeBindingOperatorConfig;
+  observedAtEpochSeconds?: number;
+};
+type NativeBindingOpenSessionArchiveOptions = {
+  archive: Uint8Array;
+  key: Uint8Array;
+  expectedSessionId: string;
+  observedAtEpochSeconds?: number;
+};
 type NativeDiagnosticsBatchCallback = (diagnosticsJson: string) => void;
 type NativeResultEventCallback = (eventJson: string) => void;
 type NativeBindingRedactionEntry = {
@@ -414,6 +641,8 @@ type NativeBindingPipelineEntity = {
   score: number;
   source: string;
   sourceDetail?: string | null;
+  providerId?: string | null;
+  detectionId?: string | null;
 };
 type NativeBindingRedactionResult = {
   redactedText: string;
@@ -425,14 +654,69 @@ type NativeBindingStaticRedactionResult = {
   resolvedEntities: NativeBindingPipelineEntity[];
   redaction: NativeBindingRedactionResult;
 };
+type NativeSessionStatus = "active" | "not_yet_active" | "expired" | "deleted";
+type NativeSessionLifecycle = {
+  createdAtEpochSeconds: number;
+  expiresAtEpochSeconds?: number;
+};
+type NativeSessionMetadata = {
+  sessionId: string;
+  createdAtEpochSeconds: number | null;
+  expiresAtEpochSeconds: number | null;
+  mappingCount: number;
+  status: NativeSessionStatus;
+};
+type NativeSessionDeletionSummary = {
+  sessionId: string;
+  deletedMappingCount: number;
+};
+type NativeSessionRedactionAtOptions = {
+  fullText: string;
+  observedAtEpochSeconds: number;
+  operators?: NativeOperatorConfig;
+};
+type NativeCreateSessionWithLifecycleOptions = NativeSessionLifecycle & {
+  sessionId: string;
+};
+type NativeOpenSessionArchiveOptions = {
+  archive: Uint8Array;
+  key: Uint8Array;
+  expectedSessionId: string;
+  observedAtEpochSeconds?: number;
+};
+type NativePreparedRedactionSessionBinding = {
+  sessionId: () => string;
+  mappingCount: () => number;
+  restoreText?: (fullText: string) => string;
+  restoreTextAt?: (fullText: string, observedAtEpochSeconds: number) => string;
+  toPlaintextJson: () => string;
+  toPlaintextJsonAt?: (observedAtEpochSeconds: number) => string;
+  toEncryptedArchive?: (key: Uint8Array) => Uint8Array;
+  toEncryptedArchiveAt?: (key: Uint8Array, observedAtEpochSeconds: number) => Uint8Array;
+  inspectJson?: (observedAtEpochSeconds?: number) => string;
+  deleteJson?: () => string;
+  redactStaticEntitiesJson: (fullText: string, operators?: NativeBindingOperatorConfig) => string;
+  redactStaticEntitiesJsonAt?: (fullText: string, observedAtEpochSeconds: number, operators?: NativeBindingOperatorConfig) => string;
+  planStaticEntitiesWithCallerDetections?: (options: NativeBindingSessionCallerRedactionPlanOptions) => NativePreparedSessionRedactionPlanBinding;
+};
+type NativePreparedSessionRedactionPlanBinding = {
+  resultJson: () => string;
+  commit: () => void;
+};
 type NativePreparedSearchBinding = {
   prepareDiagnosticsJson?: () => string;
   warmLazyRegex?: () => void;
   warm_lazy_regex?: () => void;
   warmLazyRegexDiagnosticsJson?: () => string;
   warm_lazy_regex_diagnostics_json?: () => string;
+  createRedactionSession?: (sessionId: string) => NativePreparedRedactionSessionBinding;
+  createRedactionSessionWithLifecycle?: (sessionId: string, createdAtEpochSeconds: number, expiresAtEpochSeconds?: number) => NativePreparedRedactionSessionBinding;
+  restoreRedactionSession?: (plaintextJson: string) => NativePreparedRedactionSessionBinding;
+  restoreEncryptedRedactionSession?: (options: NativeBindingOpenSessionArchiveOptions) => NativePreparedRedactionSessionBinding;
   redactStaticEntities: (fullText: string, operators?: NativeBindingOperatorConfig) => NativeBindingStaticRedactionResult;
   redactStaticEntitiesJson?: (fullText: string, operators?: NativeBindingOperatorConfig) => string;
+  redactStaticEntitiesWithCallerDetectionsJson?: (fullText: string, options: NativeBindingCallerRedactionOptions) => string;
+  redactStaticEntitiesWithCallerDetectionsDiagnosticsJson?: (fullText: string, options: NativeBindingCallerRedactionOptions) => string;
   redactStaticEntitiesResultStreamJson?: (fullText: string, operators: NativeBindingOperatorConfig | undefined, onEvent: NativeResultEventCallback) => string;
   redactStaticEntitiesDiagnosticsJson?: (fullText: string, operators?: NativeBindingOperatorConfig) => string;
   redactStaticEntitiesDiagnosticsStreamJson?: (fullText: string, operators: NativeBindingOperatorConfig | undefined, onBatch: NativeDiagnosticsBatchCallback) => string;
@@ -455,9 +739,41 @@ type NativeAnonymizeBinding = {
   assembleStaticSearchCompressedPackageBytes?: (pipelineConfigJson: Uint8Array, dictionariesJson?: Uint8Array, gazetteerJson?: Uint8Array) => Uint8Array;
 };
 type NativeOperatorConfig = {
-  operators?: Record<string, OperatorType>;
+  operators?: Record<string, OperatorSelection>;
   redactString?: string;
 };
+declare const CALLER_DETECTION_CONTRACT_VERSION = 2;
+type NativeCallerDetection = {
+  start: number;
+  end: number;
+  label: string;
+  score: number;
+  providerId: string;
+  detectionId: string;
+};
+type NativeCallerRedactionOptions = {
+  detections: readonly NativeCallerDetection[];
+  operators?: NativeOperatorConfig;
+};
+type NativeSessionCallerRedactionInput = {
+  fullText: string;
+  detections: readonly NativeCallerDetection[];
+};
+type NativeSessionCallerRedactionPlanOptions = {
+  inputs: readonly NativeSessionCallerRedactionInput[];
+  operators?: NativeOperatorConfig;
+  observedAtEpochSeconds?: number;
+};
+type NativeTextReplacement = {
+  start: number;
+  end: number;
+  replacement: string;
+};
+type NativeSessionBlockRedactionPlan = {
+  replacements: readonly NativeTextReplacement[];
+  entityCount: number;
+  callerEntityCount: number;
+};
 type NativePipelineEntity = {
   start: number;
   end: number;
@@ -466,6 +782,8 @@ type NativePipelineEntity = {
   score: number;
   source: string;
   sourceDetail?: string;
+  providerId?: string;
+  detectionId?: string;
 };
 type NativeRedactionResult = {
   redactedText: string;
@@ -523,6 +841,44 @@ type NativeBindingVersionOptions = {
   binding: NativeAnonymizeBinding;
   expectedVersion: string;
 };
+declare class PreparedNativeRedactionSession {
+  #private;
+  constructor(session: NativePreparedRedactionSessionBinding);
+  sessionId(): string;
+  session_id(): string;
+  mappingCount(): number;
+  mapping_count(): number;
+  restoreText(fullText: string, observedAtEpochSeconds?: number): string;
+  restore_text(fullText: string, observedAtEpochSeconds?: number): string;
+  toPlaintextJson(): string;
+  to_plaintext_json(): string;
+  toPlaintextJsonAt(observedAtEpochSeconds: number): string;
+  to_plaintext_json_at(observedAtEpochSeconds: number): string;
+  toEncryptedArchive(key: Uint8Array): Uint8Array;
+  to_encrypted_archive(key: Uint8Array): Uint8Array;
+  toEncryptedArchiveAt(key: Uint8Array, observedAtEpochSeconds: number): Uint8Array;
+  to_encrypted_archive_at(key: Uint8Array, observedAtEpochSeconds: number): Uint8Array;
+  inspect(observedAtEpochSeconds?: number): NativeSessionMetadata;
+  delete(): NativeSessionDeletionSummary;
+  redactStaticEntities(fullText: string, operators?: NativeOperatorConfig): NativeStaticRedactionResult;
+  redactText(fullText: string, operators?: NativeOperatorConfig): NativeStaticRedactionResult;
+  redact_text(fullText: string, operators?: NativeOperatorConfig): NativeStaticRedactionResult;
+  redactTextJson(fullText: string, operators?: NativeOperatorConfig): string;
+  redact_text_json(fullText: string, operators?: NativeOperatorConfig): string;
+  redactStaticEntitiesAt(options: NativeSessionRedactionAtOptions): NativeStaticRedactionResult;
+  redactTextAt(options: NativeSessionRedactionAtOptions): NativeStaticRedactionResult;
+  redact_text_at(options: NativeSessionRedactionAtOptions): NativeStaticRedactionResult;
+  redact_static_entities_at(options: NativeSessionRedactionAtOptions): NativeStaticRedactionResult;
+  redactTextJsonAt({ fullText, observedAtEpochSeconds, operators }: NativeSessionRedactionAtOptions): string;
+  redact_text_json_at(options: NativeSessionRedactionAtOptions): string;
+  planTextBatchWithCallerDetections({ inputs, operators, observedAtEpochSeconds }: NativeSessionCallerRedactionPlanOptions): PreparedNativeSessionRedactionPlan;
+}
+declare class PreparedNativeSessionRedactionPlan {
+  #private;
+  readonly blocks: readonly NativeSessionBlockRedactionPlan[];
+  constructor(plan: NativePreparedSessionRedactionPlanBinding);
+  commit(): void;
+}
 declare class PreparedNativeAnonymizer {
   #private;
   constructor(prepared: NativePreparedSearchBinding);
@@ -532,9 +888,21 @@ declare class PreparedNativeAnonymizer {
   warm_lazy_regex(): void;
   warmLazyRegexDiagnosticsJson(): string | null;
   warm_lazy_regex_diagnostics_json(): string | null;
+  createRedactionSession(sessionId: string): PreparedNativeRedactionSession;
+  create_redaction_session(sessionId: string): PreparedNativeRedactionSession;
+  createRedactionSessionWithLifecycle({ sessionId, createdAtEpochSeconds, expiresAtEpochSeconds }: NativeCreateSessionWithLifecycleOptions): PreparedNativeRedactionSession;
+  create_redaction_session_with_lifecycle(options: NativeCreateSessionWithLifecycleOptions): PreparedNativeRedactionSession;
+  restoreRedactionSession(plaintextJson: string): PreparedNativeRedactionSession;
+  restore_redaction_session(plaintextJson: string): PreparedNativeRedactionSession;
+  restoreEncryptedRedactionSession({ archive, key, expectedSessionId, observedAtEpochSeconds }: NativeOpenSessionArchiveOptions): PreparedNativeRedactionSession;
+  restore_encrypted_redaction_session(options: NativeOpenSessionArchiveOptions): PreparedNativeRedactionSession;
   redactStaticEntities(fullText: string, operators?: NativeOperatorConfig): NativeStaticRedactionResult;
   redact_text(fullText: string, operators?: NativeOperatorConfig): NativeStaticRedactionResult;
   redact_text_json(fullText: string, operators?: NativeOperatorConfig): string;
+  redactStaticEntitiesWithCallerDetections(fullText: string, options: NativeCallerRedactionOptions): NativeStaticRedactionResult;
+  redact_text_with_caller_detections(fullText: string, options: NativeCallerRedactionOptions): NativeStaticRedactionResult;
+  redactStaticEntitiesWithCallerDetectionsDiagnosticsJson(fullText: string, options: NativeCallerRedactionOptions): string | null;
+  redact_static_entities_with_caller_detections_diagnostics_json(fullText: string, options: NativeCallerRedactionOptions): string | null;
   redactTextJson(fullText: string, operators?: NativeOperatorConfig): string;
   redactTextStreamJson(fullText: string, onEvent: NativeResultEventCallback, operators?: NativeOperatorConfig): string | null;
   redact_text_stream_json(fullText: string, onEvent: NativeResultEventCallback, operators?: NativeOperatorConfig): string | null;
@@ -554,9 +922,21 @@ declare class PreparedNativePipeline {
   warm_lazy_regex(): void;
   warmLazyRegexDiagnosticsJson(): string | null;
   warm_lazy_regex_diagnostics_json(): string | null;
+  createRedactionSession(sessionId: string): PreparedNativeRedactionSession;
+  create_redaction_session(sessionId: string): PreparedNativeRedactionSession;
+  createRedactionSessionWithLifecycle(options: NativeCreateSessionWithLifecycleOptions): PreparedNativeRedactionSession;
+  create_redaction_session_with_lifecycle(options: NativeCreateSessionWithLifecycleOptions): PreparedNativeRedactionSession;
+  restoreRedactionSession(plaintextJson: string): PreparedNativeRedactionSession;
+  restore_redaction_session(plaintextJson: string): PreparedNativeRedactionSession;
+  restoreEncryptedRedactionSession(options: NativeOpenSessionArchiveOptions): PreparedNativeRedactionSession;
+  restore_encrypted_redaction_session(options: NativeOpenSessionArchiveOptions): PreparedNativeRedactionSession;
   redactText(fullText: string, operators?: NativeOperatorConfig): NativeStaticRedactionResult;
   redact_text(fullText: string, operators?: NativeOperatorConfig): NativeStaticRedactionResult;
   redact_text_json(fullText: string, operators?: NativeOperatorConfig): string;
+  redactTextWithCallerDetections(fullText: string, options: NativeCallerRedactionOptions): NativeStaticRedactionResult;
+  redact_text_with_caller_detections(fullText: string, options: NativeCallerRedactionOptions): NativeStaticRedactionResult;
+  redactTextWithCallerDetectionsDiagnosticsJson(fullText: string, options: NativeCallerRedactionOptions): string | null;
+  redact_text_with_caller_detections_diagnostics_json(fullText: string, options: NativeCallerRedactionOptions): string | null;
   redactTextJson(fullText: string, operators?: NativeOperatorConfig): string;
   redactTextStreamJson(fullText: string, onEvent: NativeResultEventCallback, operators?: NativeOperatorConfig): string | null;
   redact_text_stream_json(fullText: string, onEvent: NativeResultEventCallback, operators?: NativeOperatorConfig): string | null;
@@ -570,32 +950,32 @@ declare class PreparedNativePipeline {
 declare const encodeNativeSearchConfig: (config: NativePreparedSearchConfig) => Uint8Array;
 declare const encodeNativeSearchConfigInput: (config: NativeSearchPackageInput) => Uint8Array;
 declare const getNativeBindingVersion: (binding: NativeAnonymizeBinding) => string;
-declare const assertNativeBindingVersion: ({
-  binding,
-  expectedVersion
-}: NativeBindingVersionOptions) => void;
-declare const prepareNativeSearchPackage: ({
-  binding,
-  config,
-  compressed
-}: NativeSearchPackageOptions) => Uint8Array;
-declare const createNativeAnonymizerFromConfig: ({
-  binding,
-  config
-}: NativeAnonymizerFromConfigOptions) => PreparedNativeAnonymizer;
-declare const createNativeAnonymizerFromPackage: ({
-  binding,
-  packageBytes
-}: NativeAnonymizerFromPackageOptions) => PreparedNativeAnonymizer;
-declare const createNativePipelineFromPackage: ({
-  binding,
-  packageBytes
-}: NativePipelineFromPackageOptions) => PreparedNativePipeline;
+declare const assertNativeBindingVersion: ({ binding, expectedVersion }: NativeBindingVersionOptions) => void;
+declare const prepareNativeSearchPackage: ({ binding, config, compressed }: NativeSearchPackageOptions) => Uint8Array;
+declare const createNativeAnonymizerFromConfig: ({ binding, config }: NativeAnonymizerFromConfigOptions) => PreparedNativeAnonymizer;
+declare const createNativeAnonymizerFromPackage: ({ binding, packageBytes }: NativeAnonymizerFromPackageOptions) => PreparedNativeAnonymizer;
+declare const createNativePipelineFromPackage: ({ binding, packageBytes }: NativePipelineFromPackageOptions) => PreparedNativePipeline;
 declare const PreparedSearch: typeof PreparedNativeAnonymizer;
 type PreparedSearch = PreparedNativeAnonymizer;
 declare const PreparedAnonymizer: typeof PreparedNativeAnonymizer;
 type PreparedAnonymizer = PreparedNativeAnonymizer;
 //#endregion
+//#region src/context.d.ts
+/**
+ * Cached state for a single pipeline run (or a sequence of runs sharing the
+ * same config). The native pipeline builds its prepared package once and reuses
+ * it across calls with the same config; the package bytes and the key/promise
+ * that guard concurrent builds live here so callers can share one warmed
+ * context.
+ */
+type PipelineContext = {
+  nativePipelinePackage: Uint8Array | null;
+  nativePipelinePackageKey: string;
+  nativePipelinePackagePromise: Promise<Uint8Array> | null;
+};
+/** Create a fresh, empty pipeline context. */
+declare const createPipelineContext: () => PipelineContext;
+//#endregion
 //#region src/redact.d.ts
 /**
  * Serialize the redaction key to JSON for export.
@@ -609,6 +989,29 @@ declare const exportRedactionKey: (redactionMap: Map<string, string>, operatorMa
  */
 declare const deanonymise: (redactedText: string, redactionMap: Map<string, string>) => string;
 //#endregion
+//#region src/native-pipeline.d.ts
+type NativePipelineUnsupportedFeature = "enableNer";
+type NativePipelineCompatibility = {
+  status: "supported";
+} | {
+  status: "unsupported";
+  unsupportedFeatures: NativePipelineUnsupportedFeature[];
+};
+type NativePipelineBuildOptions = {
+  binding: NativeAnonymizeBinding;
+  config: PipelineConfig;
+  gazetteerEntries?: GazetteerEntry[];
+  context?: PipelineContext;
+};
+type NativePipelinePackageOptions = NativePipelineBuildOptions & {
+  compressed?: boolean;
+};
+declare const getNativePipelineCompatibility: (config: PipelineConfig) => NativePipelineCompatibility;
+declare const assertNativePipelineSupported: (config: PipelineConfig) => void;
+declare const prepareNativePipelineConfig: ({ binding, config, gazetteerEntries }: Omit<NativePipelineBuildOptions, "context">) => Promise<NativePreparedSearchConfig>;
+declare const prepareNativePipelinePackage: ({ binding, config, gazetteerEntries, context, compressed }: NativePipelinePackageOptions) => Promise<Uint8Array>;
+declare const createNativePipelineFromConfig: ({ binding, config, gazetteerEntries, context }: NativePipelineBuildOptions) => Promise<PreparedNativePipeline>;
+//#endregion
 //#region src/wasm.d.ts
 /** A prepared package the caller supplies: raw bytes, an ArrayBuffer, or a URL
  * (string or `URL`) that resolves to the package and is fetched. */
@@ -653,10 +1056,7 @@ declare const normalize_for_search: (text: string, options?: WasmBindingOptions)
 type PrepareSearchPackageOptions = WasmBindingOptions & {
   compressed?: boolean;
 };
-declare const prepare_search_package: (config: NativeSearchPackageInput, {
-  compressed,
-  ...options
-}?: PrepareSearchPackageOptions) => Promise<Uint8Array>;
+declare const prepare_search_package: (config: NativeSearchPackageInput, { compressed, ...options }?: PrepareSearchPackageOptions) => Promise<Uint8Array>;
 declare const redact_text: (config: NativeSearchPackageInput, fullText: string, operators?: NativeOperatorConfig, options?: WasmBindingOptions) => Promise<NativeStaticRedactionResult>;
 declare const redact_text_json: (config: NativeSearchPackageInput, fullText: string, operators?: NativeOperatorConfig, options?: WasmBindingOptions) => Promise<string>;
 declare const redact_text_stream_json: (config: NativeSearchPackageInput, fullText: string, onEvent: NativeResultEventCallback, operators?: NativeOperatorConfig, options?: WasmBindingOptions) => Promise<string | null>;
@@ -664,5 +1064,5 @@ declare const diagnostics_json: (config: NativeSearchPackageInput, fullText: str
 declare const diagnostics_stream_json: (config: NativeSearchPackageInput, fullText: string, onBatch: NativeDiagnosticsBatchCallback, operators?: NativeOperatorConfig, options?: WasmBindingOptions) => Promise<string | null>;
 declare const summary_diagnostics_json: (config: NativeSearchPackageInput, fullText: string, operators?: NativeOperatorConfig, options?: WasmBindingOptions) => Promise<string | null>;
 //#endregion
-export { type AnonymisationOperator, DEFAULT_ENTITY_LABELS, DETECTION_SOURCES, DETECTOR_PRIORITY, type DetectionSource, type Entity, LoadPreparedPackageOptions, NativeAnonymizeBinding, NativeAnonymizerFromConfigOptions, NativeAnonymizerFromPackageOptions, NativeBindingVersionOptions, NativeDiagnosticsBatchCallback, NativeNormalizeOptions, NativeOperatorConfig, NativePipelineEntity, NativePipelineFromPackageOptions, NativePreparedSearchBinding, type NativePreparedSearchConfig, NativeRedactionResult, NativeResultEventCallback, NativeSearchPackageInput, NativeSearchPackageOptions, NativeStaticRedactionResult, OPERATOR_TYPES, type OperatorConfig, type OperatorType, PrepareSearchPackageOptions, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedPackageSource, PreparedSearch, type RedactionResult, type ReviewDecision, type ReviewedEntity, SharedNativeDiagnosticsJsonOptions, SharedNativeDiagnosticsStreamJsonOptions, SharedNativePreparedPackageOptions, SharedNativeRedactTextJsonOptions, SharedNativeRedactTextOptions, SharedNativeRedactTextStreamJsonOptions, SharedNativeSearchPackageOptions, WasmBindingOptions, assertNativeBindingVersion, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromPackage, deanonymise, defaultPackageUrl, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getBinding, getDefaultPipeline, getNativeBindingVersion, loadDefaultPipeline, loadPipeline, load_prepared_package, native_package_version, normalize_for_search, prepareNativeSearchPackage, prepare_search_package, redactDefaultText, redactDefaultTextJson, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
+export { type AnonymisationOperator, CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES, type CapabilityManifest, type CapabilityRuntime, DEFAULT_ENTITY_LABELS, DETECTION_SOURCES, DETECTOR_PRIORITY, type DefaultEntityLabel, type DetectionSource, type Dictionaries, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, type Entity, type EntityCapability, type EntityLabel, type EntitySelection, type GazetteerEntry, LoadPreparedPackageOptions, NativeAnonymizeBinding, NativeAnonymizerFromConfigOptions, NativeAnonymizerFromPackageOptions, NativeBindingVersionOptions, NativeCallerDetection, NativeCallerRedactionOptions, NativeCreateSessionWithLifecycleOptions, NativeDiagnosticsBatchCallback, NativeNormalizeOptions, NativeOpenSessionArchiveOptions, NativeOperatorConfig, type NativePipelineBuildOptions, type NativePipelineCompatibility, NativePipelineEntity, NativePipelineFromPackageOptions, type NativePipelinePackageOptions, type NativePipelineUnsupportedFeature, NativePreparedRedactionSessionBinding, NativePreparedSearchBinding, type NativePreparedSearchConfig, NativePreparedSessionRedactionPlanBinding, NativeRedactionResult, NativeResultEventCallback, NativeSearchPackageInput, NativeSearchPackageOptions, NativeSessionBlockRedactionPlan, NativeSessionCallerRedactionInput, NativeSessionCallerRedactionPlanOptions, NativeSessionDeletionSummary, NativeSessionLifecycle, NativeSessionMetadata, NativeSessionRedactionAtOptions, NativeSessionStatus, NativeStaticRedactionResult, NativeTextReplacement, OPERATOR_TYPES, type OperatorConfig, type OperatorType, type PipelineConfig, type PipelineContext, PrepareSearchPackageOptions, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedPackageSource, PreparedSearch, type RedactionResult, type ReviewDecision, type ReviewedEntity, SharedNativeDiagnosticsJsonOptions, SharedNativeDiagnosticsStreamJsonOptions, SharedNativePreparedPackageOptions, SharedNativeRedactTextJsonOptions, SharedNativeRedactTextOptions, SharedNativeRedactTextStreamJsonOptions, SharedNativeSearchPackageOptions, WasmBindingOptions, assertNativeBindingVersion, assertNativePipelineSupported, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromPackage, createPipelineContext, deanonymise, defaultPackageUrl, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getBinding, getDefaultPipeline, getNativeBindingVersion, getNativePipelineCompatibility, loadDefaultPipeline, loadPipeline, load_prepared_package, native_package_version, normalize_for_search, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, redactDefaultText, redactDefaultTextJson, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
 //# sourceMappingURL=wasm.d.mts.map